As cybercriminals become more creative and resourceful, small and mid-sized businesses (SMBs) are increasingly being caught in the crosshairs of threats once reserved for larger enterprises. Check Point’s latest report highlights some major trends that SMBs need to pay attention to right now.

1. AI-Powered Threats Are Here And They’re Getting Smarter
Check Point researchers observed a surge in the use of generative AI tools (like WormGPT, DarkBERT, and FraudGPT) being weaponized for phishing, social engineering, and even malware development. These “Dark LLMs” are trained on illicit data and offer cybercriminals:

• More convincing phishing messages (tailored by role, industry, or language)
• Quick generation of malware code
• Easy access to tactics for bypassing MFA or endpoint protection

2. Education and Government Sectors Are Top Targets but SMBs Are Next
Though most of the high-profile attacks in May targeted public institutions, the tactics used (credential stuffing, phishing, and supply chain attacks) are just as effective against SMBs with limited resources and patchy controls.

SMBs don’t need to fear AI but you do need to stay aware, train your people, and use smart, layered tools to reduce your exposure. Every conversation we’re having with clients around AI starts with compliance.